Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/3133382e3138362e31362e302f32322d3234203d3e20323633383733.roa
File:                     3133382e3138362e31362e302f32322d3234203d3e20323633383733.roa (raw, json)
Hash identifier:          EfeVIEB5tUvtSMMW3J4oJEJh4CZft7ebqhHDjS/1kGs=
Subject key identifier:   68:26:C3:83:48:0C:06:7E:80:24:A1:FD:88:E2:04:B7:C9:D8:B8:99
Certificate issuer:       /CN=184AC896B5572D83192F860B4C6AB497566468B5
Certificate serial:       5EB49EF06DBA3A850271412642519E13E3C18871
Authority key identifier: 18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/3133382e3138362e31362e302f32322d3234203d3e20323633383733.roa
Signing time:             Thu 05 Feb 2026 04:00:18 +0000
ROA not before:           Thu 05 Feb 2026 03:55:18 +0000
ROA not after:            Thu 04 Feb 2027 04:00:18 +0000
asID:                     263873
IP address blocks:        138.186.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl
                          rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Feb 2026 10:42:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b4:9e:f0:6d:ba:3a:85:02:71:41:26:42:51:9e:13:e3:c1:88:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184AC896B5572D83192F860B4C6AB497566468B5
        Validity
            Not Before: Feb  5 03:55:18 2026 GMT
            Not After : Feb  4 04:00:18 2027 GMT
        Subject: CN=6826C383480C067E8024A1FD88E204B7C9D8B899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:db:1f:2f:e9:ac:b4:df:25:11:8d:7a:ff:
                    98:e1:3b:ba:73:34:7c:0a:12:2a:14:17:85:ab:ac:
                    64:fa:cc:cd:ad:2d:32:b2:78:45:3c:f8:a6:b5:90:
                    b9:ae:92:87:74:a7:3f:b9:30:f4:51:4f:65:ed:0d:
                    ea:77:d0:5a:2e:31:1d:7c:66:75:fb:61:78:0c:bc:
                    ab:6e:11:f3:a1:06:34:94:bd:fc:09:75:40:aa:ed:
                    43:05:a9:1d:2d:28:5e:fd:f6:ee:e6:56:4d:63:84:
                    93:e6:34:c1:5f:58:bc:cc:43:c1:91:30:60:c8:58:
                    20:4c:0a:84:3b:60:f3:0e:dd:47:d3:2f:0f:4c:4f:
                    22:e5:62:03:4d:ef:5c:ea:53:ac:33:ff:2c:ba:aa:
                    89:71:db:bc:9f:72:53:e2:7f:ef:7a:a3:75:ee:9e:
                    bb:4c:a9:a8:6e:31:7b:c6:49:d6:b2:26:a4:d7:d8:
                    89:43:f0:07:02:3f:10:16:f0:f4:47:2d:45:c2:8c:
                    63:30:e9:1e:eb:21:ce:64:1e:86:0a:e2:7a:98:07:
                    08:7e:a7:65:f5:59:5f:07:28:b6:c1:03:16:31:ee:
                    5c:ee:5f:b5:d6:59:43:19:11:4e:01:f5:2d:40:da:
                    68:3d:95:50:6f:0c:9c:7e:80:f3:42:57:de:5f:9c:
                    76:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:C3:83:48:0C:06:7E:80:24:A1:FD:88:E2:04:B7:C9:D8:B8:99
            X509v3 Authority Key Identifier:
                keyid:18:4A:C8:96:B5:57:2D:83:19:2F:86:0B:4C:6A:B4:97:56:64:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/184AC896B5572D83192F860B4C6AB497566468B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/184AC896B5572D83192F860B4C6AB497566468B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EdQsjqA1UBXasb6akub49kQPaRtn5E9v68PDSYBx4GFm/1/3133382e3138362e31362e302f32322d3234203d3e20323633383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:74:0e:ed:48:af:3f:d4:7b:07:29:a3:48:80:e5:d5:fa:3b:
         da:2a:e1:e3:39:8f:7a:9a:59:6f:d6:be:54:d6:03:87:45:78:
         40:22:d7:c8:c2:a2:2b:12:b8:c3:20:b2:99:d8:3c:a9:fd:19:
         22:18:6e:a5:2d:eb:9b:16:93:9e:6d:90:3d:e9:b3:3a:29:9f:
         9a:3d:b2:b2:b2:1c:10:81:48:47:7d:f8:82:7c:c2:e7:4e:ae:
         74:b4:50:0c:ad:af:77:60:fd:17:36:96:06:51:bb:70:98:92:
         82:25:46:d2:e6:c8:0a:c8:9d:4d:a3:f2:67:91:e4:72:e2:cb:
         70:df:67:17:55:2a:8e:d0:d8:b4:5c:26:32:3f:1f:ec:f5:6e:
         df:08:e0:3a:a7:bf:8c:fd:ae:57:e6:8e:17:bc:5f:1d:b9:80:
         7a:0a:84:31:c1:ae:19:e0:22:0d:a9:20:44:7c:ac:67:e2:55:
         45:d6:ad:d8:2a:36:c7:1a:04:0d:80:3d:19:aa:29:b8:6a:16:
         96:a9:b8:b3:66:37:e8:3e:1e:a2:70:4d:1c:5d:a6:ef:8d:a9:
         4c:f3:ac:a0:7a:17:0c:fd:2b:84:56:47:11:3a:bc:99:9d:97:
         45:c9:5d:f6:84:25:e5:26:de:9d:8f:1a:24:85:4f:23:bf:1f:
         5c:d7:2d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:56:44 2026 by rpki-client